Review Pilot Privacy Policy

Last updated: 2026-08-20

This app helps a Shopify store owner ask their customers for a product review after an order is fulfilled. This policy explains what personal data the app processes, why, and how it's protected.

What data we collect

When an order is fulfilled, the app reads the following from Shopify's orders/fulfilled webhook and stores it:

• Customer email address
• Customer first/last name (if provided)
• Order name/number
• The star rating and comment the customer submits, if any

We do not collect payment details, addresses, phone numbers, or any data beyond what's listed above.

Why we collect it

• Email:to send the review-request email and to let a customer unsubscribe from future requests.
• Name:to personalize the review-request email ("Hi Jane,").
• Order name:shown in the email and next to the review, so the merchant knows which order it relates to.
• Rating/comment:the feedback itself, shown to the merchant in the app's Reviews page.

This data is used only to send review-request emails and display the resulting reviews to the store owner. It is never sold, shared with third parties for marketing, or used for advertising/profiling.

Third parties involved

• Resend (resend.com): the transactional email provider used to deliver review-request emails. Resend only receives the recipient email, subject, and email body needed to send that one message.
• Hosting provider:hosts the app and its database. Requests to the app are logged as part of normal hosting/platform operations.

Data retention

• Review requests and reviews are kept for as long as the app is installed on the store, so the merchant can see review history.
• If a customer unsubscribes, we stop emailing them but keep the unsubscribe record itself (just the email address) so we don't email them again.
• If the merchant uninstalls the app, all data for that shop (review requests, reviews, settings) is deleted within 48 hours, per Shopify's shop/redact webhook.
• If a customer requests their data or requests deletion (Shopify's customers/data_request / customers/redact webhooks), we respond within Shopify's required timeframe.

Customer rights

• Unsubscribe:every review-request email includes an unsubscribe link; clicking it stops all future review requests to that address.
• Data deletion/access:handled automatically via Shopify's mandatory GDPR webhooks, which the merchant's customers can trigger through Shopify.

Contact

Questions about this policy, or requests regarding your data, can be sent to support@reviewspilot.shop.